CVE-2020-4213

The CVE-2020-4213 entry concerns IBM Spectrum Protect Plus (versions 10.1.0 and 10.1.5). The connected Nessus item documents a remote command injection affecting the administrative console: improper validation of user-supplied data during login HTTP requests enables an unauthenticated attacker to...

Security Bulletin: Command injection vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4210, CVE-2020-4213, CVE-2020-4222, CVE-2020-4212, CVE-2020-4211)

Summary Command injection vulnerabilities in IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4210 DESCRIPTION: IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary code on the system. By...